Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/5MOkeZMnNdJZ_AsHn6SgogBLjG8.roa
File: 5MOkeZMnNdJZ_AsHn6SgogBLjG8.roa (raw, json)
Hash identifier: sJLpJBxFhDM2Ne91+dVbdJ7IRb8IphjvS/05CBFiGeA=
Subject key identifier: E4:C3:A4:79:93:27:35:D2:59:FC:0B:07:9F:A4:A0:A2:00:4B:8C:6F
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 218789A1
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/5MOkeZMnNdJZ_AsHn6SgogBLjG8.roa
Signing time: Tue 08 Feb 2022 12:21:42 +0000
ROA not before: Tue 08 Feb 2022 12:21:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202553
IP address blocks: 147.181.4.0/22 maxlen: 24
147.181.8.0/22 maxlen: 24
147.181.16.0/23 maxlen: 24
147.181.12.0/22 maxlen: 24
147.181.32.0/22 maxlen: 24
147.181.36.0/22 maxlen: 24
147.181.44.0/22 maxlen: 24
2a04:9a00:1006::/48 maxlen: 48
2a04:9a00:1001::/48 maxlen: 48
2a04:9a00:1002::/48 maxlen: 48
2a04:9a00:1005::/48 maxlen: 48
2a04:9a00:1003::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562530721 (0x218789a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Feb 8 12:21:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4c3a479932735d259fc0b079fa4a0a2004b8c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:52:8d:a1:35:2b:65:03:16:cd:41:f1:d4:
1b:d9:c6:78:07:99:85:9a:7c:16:8a:95:9d:24:66:
1a:88:5b:01:a8:95:ed:cf:4a:6f:10:4d:e6:81:c2:
6d:26:5f:50:93:ac:c2:67:c6:72:c5:de:d7:15:99:
bb:55:a5:9f:57:47:06:f9:4d:1e:fb:1b:58:e1:9f:
59:a4:cd:a5:69:97:48:30:85:36:1a:47:6b:8a:25:
0f:64:47:79:8e:06:98:5d:6a:9b:31:55:b7:8d:d0:
99:1a:b6:b7:04:c3:67:23:51:b4:61:4c:f5:bf:9c:
7f:29:89:3e:af:fe:b1:c3:3c:9d:10:69:fe:b4:7b:
46:5a:ea:25:ae:2b:f9:a4:b5:1a:b2:cb:3b:c2:02:
d9:42:f8:f3:e3:5d:17:83:fe:74:26:be:a8:e4:07:
f7:3b:36:c3:c6:e2:a6:8f:c2:6f:bf:14:77:21:19:
91:83:8b:7c:d1:92:e2:de:c4:df:9b:e0:3d:d6:03:
10:84:8b:0e:d0:33:a9:9f:d4:70:4f:c6:fa:45:82:
58:a3:de:ab:ef:26:b3:24:86:8e:c4:3f:8f:a2:88:
64:82:2c:09:ab:48:ed:67:1b:d7:0e:f3:0b:14:92:
d2:ce:4e:68:28:d3:22:da:f5:70:13:cd:41:bb:68:
9a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C3:A4:79:93:27:35:D2:59:FC:0B:07:9F:A4:A0:A2:00:4B:8C:6F
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/5MOkeZMnNdJZ_AsHn6SgogBLjG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.181.4.0-147.181.17.255
147.181.32.0/21
147.181.44.0/22
IPv6:
2a04:9a00:1001::-2a04:9a00:1003:ffff:ffff:ffff:ffff:ffff
2a04:9a00:1005::-2a04:9a00:1006:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
77:c9:1b:0b:68:73:07:be:b3:e3:a1:ac:d0:e0:59:c4:e6:91:
8f:06:5c:67:12:89:6c:06:3b:a7:3f:dc:2e:12:e5:de:02:76:
aa:d6:16:43:ec:e5:0e:50:c7:b5:dd:18:ef:39:13:5b:05:cd:
bd:b5:1a:15:a4:66:00:78:0d:88:c3:9a:6c:7b:d2:d3:87:55:
5e:dc:31:4b:36:29:e9:8c:2d:06:a2:dc:d8:26:d8:b0:61:7a:
89:be:88:20:b3:92:b1:ae:28:f1:fd:6a:f1:91:42:d8:f5:b4:
f7:a6:ed:84:3e:10:88:f9:84:f2:ed:52:5b:aa:d9:be:22:62:
24:f0:2e:c9:47:32:e8:53:7c:40:bb:87:e1:5f:4a:e9:b3:16:
2e:95:45:85:64:05:10:61:3b:2f:13:d5:6d:59:67:28:d8:23:
1f:56:5b:6c:ba:a1:1b:80:bb:0c:dd:80:92:fb:f6:ae:f1:35:
2e:49:71:6f:07:73:50:bd:77:59:cd:74:bf:df:0a:dc:b3:96:
4a:7d:86:c6:8d:45:63:55:6c:9d:23:68:ca:0a:39:09:61:b3:
3b:2c:5c:cb:90:fc:8e:2b:77:bc:4d:d0:fc:f4:d7:05:3b:ea:
b2:08:43:3d:d7:15:ea:95:63:4b:5e:b4:e5:24:32:c0:98:df:
dd:50:7b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:31 2023 by rpki-client on console-fra.rpki-client.org